The information provided in this blog entry is provided as-is, proceed at your own risk.

I recently was working on separating permissions for desktop and server groups. This is easily done by separating out the collections and only allowing each group to see the collections and resources associated with their group.  However, by default the FEP collections are locked, so we can’t modify the security to grant read access to the collections.  

I used the following SQL queries to unlock the FEP collections, allowing me to update security, then I locked them back down again after the fact.

Identify any locked Collections:

select * from collections where flags = 258

Select only the FEP collections:

select * from collections where CollectionID BETWEEN 97 and 125

Unlock the FEP collections:

update collections set flags=18 where CollectionID BETWEEN 97 and 125

Lock the FEP collections:

update collections set flags=258 where CollectionID BETWEEN 97 and 125